Main Area and Open Discussion > Living Room

Evil, evil trojans and virii

(1/2) > >>

Cpilot:
This week I've had the pleasure of fighting with a persistent and evil Trojan/virus on my system that finally required a wipe of my hard drive and installation of Windows XP.
No anti-virus software that I tried wouldn't even recognize that I had a Trojan/virus.
What it would do is execute an instance of IE and display various advertising webpages and slow my system down. The offending executable would show up in the task manager as dEmE3H1V.exe.
A search of the system would show dEmE3H1V.exe_pf in the windows pref etch folder and dEmE3H1V.exe with dEmE3H1V._a_a in the system32 folder.
Deleting them of course was futile as they would replicate themselves at a later time.
After they were deleted IE would close due to an error in D6M3t6p7.dll, Of course I have no idea what this browser "helper" was supposed to do. Disabling it had no effect.
Googling these items showed no results.
The result of these "items" running was multiple crashes and a slowing of my system, I believe that this virus/Trojan was picked up through my sons My Space account.

It's already too late to save myself from the damage caused by these but I wanted to post a warning and maybe get some input on protecting systems from possible unknown threats that others may have encountered, and start a thread on real time little known threats that are out there and how to fix or avoid them.

lanux128:
SmitFraudFix is quite good at removing these malware-types. as soon as you realize that you're infected, restart in safe mode and let the program clean your PC.


• http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Cpilot:
SmitFraudFix is quite good at removing these malware-types. as soon as you realize that you're infected, restart in safe mode and let the program clean your PC.
 (see attachment in previous post)• http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
-lanux128 (August 22, 2008, 12:14 AM)
--- End quote ---
Might be an idea, and I hate to be presumptuous, that DC might need a forum to discuss these concerns.
There are new threats out there every day and a repository of what they are and possible methods to elimate them would come in handy.
I know I could have used it.

f0dder:
Stop using IE, and start using firefox with and ad-blocker and possibly also noscript. You might want to use a tool like DropMyRights to run your browser in an even more safe mode.

p3lb0x:
Stop using IE, and start using firefox with and ad-blocker and possibly also noscript. You might want to use a tool like DropMyRights to run your browser in an even more safe mode.
-f0dder (August 22, 2008, 08:11 AM)
--- End quote ---

Our mom had the same problem, she had infected her own and her boyfriends computer with a bunch of crap by using IE, we have FINALLY after 8 months or so gotten her to use FireFox with adblock+

Navigation

[0] Message Index

[#] Next page